Re: [malware-list] [RFC 0/5] [TALPA] Intro to a linux interface for on access scanning

Alan Cox
2008-08-05T11:41:15Z

> > It may be possible to do in glibc, LD_PRELOAD doesn't exactly work for
> > suid binaries
>
> Are suid binaries something that you feel is necessary to scan from?
>
> I don't see it on the list above :)

Doesn't work very well really does it - ld.so loads files too and can be
attacked.